CORS Explained: Why Browsers Block Cross-Origin Requests

CORS (Cross-Origin Resource Sharing) is a browser security mechanism that controls how web pages access resources from different origins. When a request is cross-origin, the browser sends it to the server but blocks JavaScript from reading the response unless the server includes the appropriate Access-Control-Allow-Origin header. This is why tools like Postman succeed where browsers fail—they don't enforce CORS.